Deciding to trust a provider - any provider - isn't just any one thing. So, the most basic step to me is all the relevant code being open source. The next step is getting their infrastructure audited. The step after that is seeing what happens if they get court ordered to provide data.
They do none of that and I'm just too cynical to accept 'trust me bro' as a convincing sales tactic.